sync dari sicabe-doc/deploy @ bc1a6e6

2026-10-11 13:59:47 +07:00
parent 4ca7a9a58e
commit cbabe96061
29 changed files with 1210 additions and 650 deletions
@@ -268,10 +268,14 @@ check_security() {
        fail "  ${OIDC_NAME}: tidak memuat ${pat} (cek bootstrap.sh --step 5)"
      fi
    done
-    if [[ "${oidc}" == *"redirect_url\" = \"http://localhost:${STARROCKS_HTTP_PORT:-12030}/api/oauth2\""* ]]; then
-      pass "  ${OIDC_NAME}: redirect_url → http://localhost:${STARROCKS_HTTP_PORT:-12030}/api/oauth2"
+    # redirect_url harus = alamat BROWSER (host FE) — bukan localhost/nama container.
+    local _sraddr="${STARROCKS_FE_HOST:-}"
+    [[ "${_sraddr}" == *.* && "${_sraddr}" != "127.0.0.1" ]] || _sraddr="${SICABE_HOST_ADDRESS:-localhost}"
+    local _srexp="http://${_sraddr}:${STARROCKS_HTTP_PORT:-12030}/api/oauth2"
+    if [[ "${oidc}" == *"redirect_url\" = \"${_srexp}\""* ]]; then
+      pass "  ${OIDC_NAME}: redirect_url → ${_srexp}"
    else
-      warn "  ${OIDC_NAME}: redirect_url tidak sesuai STARROCKS_HTTP_PORT (${STARROCKS_HTTP_PORT:-12030})"
+      warn "  ${OIDC_NAME}: redirect_url bukan '${_srexp}' (cek bootstrap.sh --step 5)"
    fi
    local g miss="" groups
    IFS=',' read -ra groups <<< "${EXPECTED_GROUPS}"